| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-9278 | 6.4 | An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The device can be reset to its default configuration by accessing an unauthenticated URL. | 2021-07-21 11:39:00 | 2020-04-20 23:15:00 |
| CVE-2020-9275 | 5.0 | An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A cfm UDP service listening on port 65002 allows remote, unauthenticated exfiltration of administrative credentials. | 2021-07-21 11:39:00 | 2020-04-20 23:15:00 |
| CVE-2020-9070 | 4.3 | Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can tric | 2021-07-21 11:39:00 | 2020-04-20 20:15:00 |
| CVE-2020-3946 | 5.0 | InstallBuilder AutoUpdate tool and regular installers enabling <checkForUpdates> built with versions earlier than 19.11 are vulnerable to Billion laughs attack (denial-of-service). | 2021-07-21 11:39:00 | 2020-04-20 20:15:00 |
| CVE-2020-1803 | 2.9 | Huawei smartphones Honor V20 with versions earlier than 10.0.0.179(C636E3R4P3),versions earlier than 10.0.0.180(C185E3R3P3),versions earlier than 10.0.0.180(C432E10R3P4) have an information disclosure vulnerability. The device does not sufficiently v | 2021-07-21 11:39:00 | 2020-04-20 20:15:00 |
| CVE-2020-11885 | 6.5 | WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the XML validator to make unintended network invocations such as SSRF via an uploaded file. | 2021-07-21 11:39:00 | 2020-04-17 20:15:00 |
| CVE-2020-5728 | 4.3 | OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (such as login.htm). There is insufficient validation for this parameter, which allows for the possibility of cross-site scripting. | 2021-07-21 11:39:00 | 2020-04-17 19:15:00 |
| CVE-2020-11883 | 5.0 | In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names. | 2021-07-21 11:39:00 | 2020-04-17 19:15:00 |
| CVE-2020-0080 | 9.3 | In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps without the notification icon that it's overlaying. This could lead to local escalation of privilege with User exec | 2021-07-21 11:39:00 | 2020-04-17 19:15:00 |
| CVE-2020-0068 | 2.1 | In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitatio | 2021-07-21 11:39:00 | 2020-04-17 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: